medium4.3
CVE-2010-3294
Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitra…
Impact
Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pecl-Php | Alternative Php Cache | through 3.1.3 Versions 2.0, 2.0.2, 2.0.3, 2.0.4, 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4
- http://rhn.redhat.com/errata/RHSA-2012-0811.html
- http://www.openwall.com/lists/oss-security/2010/09/14/1
- http://www.openwall.com/lists/oss-security/2010/09/14/6
- http://www.openwall.com/lists/oss-security/2010/09/14/8
- http://www.vupen.com/english/advisories/2010/2406
- http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4
- http://rhn.redhat.com/errata/RHSA-2012-0811.html
- http://www.openwall.com/lists/oss-security/2010/09/14/1
- http://www.openwall.com/lists/oss-security/2010/09/14/6
- http://www.openwall.com/lists/oss-security/2010/09/14/8
- http://www.vupen.com/english/advisories/2010/2406